Your job records are the business. Here is how we protect them.

What Woodsystems does to protect your data

Two-step sign-in

Any authenticator app works: standard time-based codes, with recovery codes for a lost phone. Each person turns it on for their own account, and a password alone no longer opens it.

Sign out everywhere

Changing your password ends every open session on every device, including the laptop somebody left open at the shop.

Guessing is slowed down

Repeated failed sign-ins are throttled before the password is even checked, whether or not the address exists. Passwords have a length floor, and the common breached ones are refused.

Roles keep money off the floor

Owner, admin, manager, office and production. Production users work from the calendar and never see estimates, invoices, payments, products, reports or company settings.

The kiosk is not the office

The shop tablet signs in with a PIN or a badge, is scoped to its department, shows the work and never the prices, and one credential runs on one tablet at a time.

Your records, your bucket

Every record carries your company, and each company gets its own cloud storage bucket for drawings, photos and documents.

Encrypted and backed up

Every connection is encrypted in transit. The database is backed up automatically and snapshotted again before every change to its structure.

Connected accounts stay sealed

Mailbox, cloud storage and QuickBooks connections use the provider's own sign-in. The tokens are stored encrypted and can be disconnected from Settings at any time.

Support access is on the record

If our staff open your account to help, that sign-in is written to an append-only log: who, which user, which company, when and from where.

Customer links you control

Customers open estimates, invoices and signing pages through a link, with no login to manage. Each link is unique to that send and can be revoked at any time.

API keys built for the open internet

A key is shown once and stored only as a fingerprint. Each carries its own permissions and rate limits, and can be rotated or revoked from the Integrations tab.